VIRTUAL PATH CONFIGURATION APPARATUS, VIRTUAL PATH 
CONFIGURATION METHOD, AND COMPUTER PRODUCT 



BACKGROUND OF THE INVENTION 
5 1) Field of the Invention 

The present invention relates to a technology for configuring a 
virtual path of a virtual private network (VPN). 



2) Description of the Related Art 

10 Recently, as the Internet spreads, companies that use the 

Internet (hereinafter, "user companies") are able to connect their 
branches without utilizing a virtually leased line service such as 
Asynchronous Transfer Mode (ATM) and a frame relay. 

As to utilization in wide area network (WAN), a commercial 

15 communication service has started in 1994 in the United States, and a 
service of "super relay CR" has started by Nippon Telegraph and 
Telephone Corporation (NTT) in 1995 in Japan. In the next-generation 
B-ISDN proposed by NTT, a transmission speed was supposed to be 
heightened and public communication lines were supposed to be 

20 integrated based on ATM technology. 

On the other hand, the development of ATM-LAN in which the 
ATM technology is applied to local area network (LAN) already makes 
progress in the early part of the nineties, and the ATM-LAN with a 
maximum transmission speed of 25 mega bits per seconds was 

25 standardized by an ATM-LAN forum. The ATM-LAN has a function of 



"LANE (LAN emulation)" which virtually provides the same service as 
that of Ethernet (Registered Trademark). 

Commercialization of the ATM-LAN has started in 1992. 
However, it has not widely spread because it has taken a long time to 
5 standardize enormous specifications and low-priced Ethernet 
(Registered Trademark) has spread quickly. 

Although the ATM is now spreading in WAN, Gigabit Ethernet 
(Registered Trademark), Fiber Distributed Data Interface (FDDI), and 
the like are more popular than ATM in LAN. At present, an attention is 
10 paid to enhancement of compatibility with explosively widespread 

Internet Protocol (IP). In Internet Engineering Task Force (IETF), "IP 
over ATM" which treats IP protocol on ATM network is developed. 

Working groups are formed in the ATM forum last year, and 
specifications of "FAST" (Frame Relay ATM over SONET Transport) and 
15 the like which can treat a variable length cell expandable up to 64 Kilo 
bite are established. 

In general, a user network uses a private address, and thus 
packet cannot directly flow to the Internet using global address. 

To make communication between user network sites via the 
20 global Internet, therefore, the following mechanism is required. In the 
mechanism, encapsulation is made by IP packet having a global 
address, and the packet is transmitted from the user network via a 
global network to the global Internet, and the packet is received by a 
global network connecting router in a destination site and 
25 simultaneously the encapsulation is released, so as to be routed to a 



destination host in the destination site. 

In this case, a user should prepare an apparatus which can start 
and terminate a tunnel (capable of encapsulating and decapsulating), 
and thus renewal and upgrading of equipment are necessary. Further, 
5 packet processing becomes complicated, performance may not be able 
to be heightened, or expensive equipment is possibly necessary to 
heighten the performance. 

Further, when many branches are present, configuration of 
routers connected with the global Internet becomes complicated 
10 (control of paths, setting of logical interface, and the like). In this case, 
since user companies should educate administrators and maintain 
network equipment, the overall operation becomes expensive. 

A new VPN service is considered, in which the maintenance of 
VPN is outsourced to an Internet service provider(s) or carriers and 
15 users can directly utilize user's existent routers as it is. 

In this service, provider's routers provide the starting/terminating 
function of tunnels, and simultaneously, when a plurality of user sites 
are present, the provider's routers provide control of paths in the user 
network, which determines a tunnel to which encapsulated packet 
20 should be transmitted according to a destination user network. 

At this time, a provider edge router transmits packet based on 
path information for the user network separately from path information 
for a global network. Such a VPN service is called as IP-VPN. 

Fig. 34 is to explain how a virtual path is constructed in the VPN 
25 conventionally. LAN segments S1, S2, S3, and S4 are user network 



used by VPN users. Virtual paths #11 to #44 are set between ports P1 
to P4 related with the LAN segments S1 to S4, so that VPN is 
configured. 

The LAN segment S1 is attached to the port P1 of a node N1. 
5 The LAN segment S2 is attached to the port P2 of the node N1 . 

"10.1.1.1" is given as an IP address to the node N1. A console C1 is 
provided correspondingly to the node N1, and it is used when a virtual 
path related with the node N1 (ports P1 and P2) is set. 

The LAN segment S3 is attached to the port P3 of a node N2. 
10 A console C2 is used when a virtual path related with the node N2 (port 
P3) is set. "10.2.1.1" is given as an IP address to the node N2. 

The LAN segment S4 is attached to the port P4 of a node N3. 
A console C3 is used when a virtual path related with the node N3 (port 
P4) is configured. "10.3.1.1" is given as an IP address to the node N3. 
15 Communication with the nodes N1 to N3 is made via a network NET. 

A network administrator uses all the consoles C1 to C3 so as to 
individually log into every node from N1 to N3 and set information for 
configuring VPN in each node, so that the virtual paths #11 to #44 are 
configured (See Japanese Patent Application Laid-Open No. 
20 2002-176436). 

In the conventional art shown in Fig. 34, when the virtual path 
on the VPN is configured, a network administrator should log into every 
node from N1 to N3 individually by using every console from C1 to C3 
and should set information for configuring VPN in each node. A great 
25 load, therefore, rests on the network administrator, and this 



conventional art has less convenience. 

Particularly, as a number of nodes and ports becomes larger, 
the load becomes greater. Consequently, this problem becomes more 
serious. 

5 

SUMMARY OF THE INVENTION 

It is an object of the present invention to solve at least the 
problems in the conventional technology. 

A virtual path configuration apparatus according to one aspect 

10 of the present invention is used in a virtual private network to 

interconnect a plurality of user networks via virtual paths and that is 
arranged in each node. The virtual path configuration apparatus 
includes a configuration information setting unit that sets configuration 
information that is information about configuration of the virtual private 

15 network; a configuration information sharing unit that shares the 
configuration information with other virtual path configuration 
apparatuses in the virtual private network by transmitting the 
configuration information set by the configuration information setting 
unit to the other virtual path configuration apparatuses or receiving 

20 configuration information from the other virtual path configuration 

apparatuses; and a virtual path configuration unit that configures the 
virtual path based on the configuration information shared. 

A virtual path configuration method according to another aspect 
of the present invention is executed on a virtual path configuration 

25 apparatus used in a virtual private network for interconnecting a 
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plurality of user networks via virtual paths and that is arranged in each 
node. The virtual path configuration method includes setting 
configuration information that is information about configuration of the 
virtual private network; sharing the configuration information with other 
virtual path configuration apparatuses in the virtual private network by 
transmitting the configuration information set by the configuration 
information setting unit to the other virtual path configuration 
apparatuses or receiving configuration information from the other virtual 
path configuration apparatuses; and configuring the virtual path based 
on the configuration information shared. 

A computer program according to still another aspect of the 
present invention realizes the virtual path configuration method 
according to the above aspect on a virtual path configuration apparatus 
that is a computer. 

The other objects, features, and advantages of the present 
invention are specifically set forth in or will become apparent from the 
following detailed descriptions of the invention when read in conjunction 
with the accompanying drawings. 

BRIEF DESCRIPTION OF THE DRAWINGS 

Fig. 1 is to explain how a virtual path is constructed according to 
an embodiment of the present invention in a VPN; 

Fig. 2 is a detailed block diagram of virtual path configuration 
apparatuses 100, 200, and 300; 

Fig. 3 is a block diagram of configuration information 



exchanging sections 130, 230, and 330; 

Fig. 4 is a block diagram of virtual path determination sections 
140, 240, and 340 shown in Fig. 1; 

Fig. 5 is to explain contents of configuration information tables 
5 120, 220, and 320; 

Figs. 6 and 7 are to explain contents of a configuration 
information synchronization table 132, and node synchronization tables 
134! and 134 2 ; 

Fig. 8 is a diagram to explain contents of a virtual path 
10 management table 142; 

Fig. 9 is a diagram to explain contents of a virtual path 
management table 242; 

Fig. 10 is a diagram to explain contents of a virtual path 
management table 342; 
15 Fig. 11 is a flowchart operations performed by the virtual path 

configuration apparatuses 100, 200, and 300; 

Fig. 12 is a flowchart of a first configuration information 
exchanging process; 

Fig. 13 is a flowchart of a second configuration information 
20 exchanging process; 

Figs. 14 and 15 are flowcharts of a virtual path calculating 
process; 

Fig. 16 is a flowchart of a bi-directional virtual path confirming 
process; 

25 Fig. 17 is a block diagram of a first modification of the present 

7 



invention; 

Figs. 18A to 18C are to explain contents of configuration 
information tables 120\ 220', and 320'; 

Fig. 19 is a diagram to explain contents of a virtual path 
5 management table 142'; 

Fig. 20 is a diagram to explain contents of a virtual path 
management table 242'; 

Fig. 21 is a diagram to explain contents of a virtual path 
management table 342'; 
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a third modification of the embodiment; 
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a fourth modification of the embodiment; 
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a fifth modification of the embodiment; 
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a sixth modification of the embodiment; 
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an eighth modification of the embodiment; 
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a ninth modification of the embodiment; 
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a tenth modification of the embodiment; 
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DETAILED DESCRIPTION 

Exemplary embodiments of a virtual path configuration 
apparatus and a virtual path configuration method according to the 
present invention are explained in detail below with reference to the 
5 accompanying drawings. 

Fig. 1 is to explain how a virtual path is constructed according to 
an embodiment of the present invention in a VPN. Structural elements 
that perform same or similar functions or have same or similar 
configuration as those in Fig. 34 are designated by same reference 
10 numbers. As compared to Fig. 34, virtual path configuration 

apparatuses 100, 200, and 300 have been provided, and the consoles 
C1, C2, and C3 have been omitted. 

The nodes N1 , N2, and N3 are connected with each other via a 
control network 400 and a relay network 410. The control network 400 
15 is used for configuring a virtual path in VPN and transmitting various 
information relating to establishment of connection between the nodes. 
Meanwhile, the relay network 410 is used for relaying data packet after 
the establishment of the connection. 

The virtual path configuration apparatus 100 is provided at the 
20 node N1, the virtual path configuration apparatus 200 is provided at the 
node N2, and the virtual path configuration apparatus 300 is provided at 
the node N3. The virtual path configuration apparatuses 100, 200, and 
300 configure virtual paths (#11 to #44) in the VPN. 

Detailed configuration of the virtual path configuration 
25 apparatuses 100, 200, and 300 is shown in Fig. 2. In the virtual path 



configuration apparatus 100, a configuration information setting section 
110 is operated by a network administrator and is used for setting 
configuration information for specifying the configuration of VPN. The 
configuration information includes sets of ports and nodes. 
5 For example, when VPN for communication between LAN 

segments S1, S2, and S3 is configured, the configuration information 
includes information about the node N1 and the port P1 for attaching 
the LAN segment S1, information about the node N1 and the port P2 for 
attaching the LAN segment S2, and information about the node N2 and 

10 the port P3 for attaching the LAN segment S3. 

A configuration information table 120 is a table in which the 
configuration information is set. Fig. 5 (see (a)) illustrates a 
configuration information table 120 in which the configuration 
information corresponding to the above configuration example is set. 

15 When VPN for communication between the LAN segments S1, 

S2, S3, and S4 is configured, the configuration information includes 
information about the node N1 and the port P1 for attaching the LAN 
segment S1, information about the node N1 and the port P2 for 
attaching the LAN segment S2, information about the node N2 and the 

20 port P3 for attaching the LAN segment S3, and information about the 
node N3 and the port P4 for attaching the LAN segment S4. 

Fig. 5 (see (g)) illustrates the configuration information table 120 
in which the configuration information corresponding to this 
configuration example is set. 

25 The configuration information setting section 110 has a function 
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for adding configuration information to the configuration information 
table 120, and a function for deleting configuration information from the 
configuration information table 120. At the time of addition, an adding 
command as a setting command and configuration information to be 
5 added are input from the configuration information setting section 110. 
On the other hand, at the time of deletion, a deleting command as a 
setting command and configuration information to be deleted are input 
from the configuration information setting section 110. 

A configuration information exchanging section 130 (see Fig. 2) 

10 has a function for exchanging configuration information to be added or 
deleted between the nodes defined in the configuration information 
table 120 so as to share the information and synchronize the 
configuration information. The "synchronized state" here means that a 
node as a transmission destination of the configuration information 

15 receives the configuration information and transmits a response to a 
node as a transmission source, and both of the nodes can share the 
configuration information. 

When both of the nodes synchronizes with each other, contents 
of the configuration information table provided to the nodes are the 

20 same as each other. 

A virtual path determination section 140 determines a plurality of 
virtual paths so that the plural ports defined in the configuration 
information table 120 are in a full-mesh state. The virtual paths #11 to 
#44 are determined between the ports P1 to P4. 

25 The virtual paths are expressed by numbers of two digits (x and 



y) after #. A number x represents a port of a starting point in the 
virtual paths. A number y represents a port of an end point in the 
virtual paths. For example, the virtual path #11 is a path from the port 
P1 as the starting point to the port P1 as the end point. The virtual 
5 path #21 is a path from the port P2 as the starting point to the port P1 
as the end point. 

A virtual path configuration section 150 has a function for 
configuring virtual paths determined by the virtual path determination 
section 140 on VPN. 

10 The virtual path configuration apparatus 200 in the node N2 also 

includes a configuration information setting section 210, a configuration 
information table 220 (see (b) in Fig. 5), a configuration information 
exchanging section 230, a virtual path determination section 240, and a 
virtual path configuration section 250 similarly to the virtual path 

15 configuration apparatus 100. 

The configuration information setting section 210, the 
configuration information table 220, the configuration information 
exchanging section 230, the virtual path determination section 240, and 
the virtual path configuration section 250 have the same configurations 

20 as those of the configuration information setting section 110, the 
configuration information table 120, the configuration information 
exchanging section 130, the virtual path determination section 140, and 
the virtual path configuration section 150. 

The virtual path configuration apparatus 300 in the node N3 

25 includes a configuration information setting section 310, a configuration 
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information table 320 (see (c) is Fig. 5), a configuration information 
exchanging section 330, a virtual path determination section 340, and a 
virtual path configuration section 350 similarly to the virtual path 
configuration apparatus 100. 
5 The configuration information setting section 310, the 

configuration information table 320, the configuration information 
exchanging section 330, the virtual path determination section 340, and 
the virtual path configuration section 350 have the same configurations 
as those of the configuration information setting section 110, the 

10 configuration information table 120, the configuration information 

exchanging section 130, the virtual path determination section 140, and 
the virtual path configuration section 150. 

Fig. 3 is a block diagram of configuration information 
exchanging sections 130, 230, and 330. In the configuration 

15 information exchanging section 130 in the virtual path configuration 
apparatus 100, when the configuration information setting section 110 
sets (adds or deletes) the configuration information, an entry setting 
section 131 sets an entry (the configuration information, an 
addition/deletion flag and a synchronization flag) in the configuration 

20 information synchronization table 132. 

Further, when a newness determination section 133 determines 
that the entry is new, the entry setting section 131, sets the entry in the 
configuration information synchronization table 132. 

Figs. 6 and 7 are to explain contents of a configuration 

25 information synchronization table 132, and node synchronization tables 



1 34i and 134 2 . In the configuration information synchronization table 
132, the nodes and the ports correspond to the nodes and the ports in 
the configuration information table 120. 

The addition/deletion flag is a flag which represents the setting 
5 command (adding command or deleting command) input by the 

configuration information setting section 110. Specifically, when the 
adding command for adding configuration information (information 
about node and port) into the configuration information table 120, the 
addition/deletion flag indicates is set to 1. 

10 On the other hand, when the deleting command for deleting 

configuration information (information about node and port) from the 
configuration information table 120, the addition/deletion flag is set to 0. 

The synchronization flag represents whether synchronization 
with the node as the exchanging destination of the configuration 

15 information is established. In the case of a synchronous state, the 
synchronization flag is set to 1 . On the other hand, in the case of an 
asynchronous state, the synchronization flag is set to 0. 

The newness determination section 133 compares node 
synchronization tables (134! and 134 2 ) with the configuration 

20 information synchronization table 132, so as to determine whether the 
entry (configuration information) set by the entry setting section 131 is a 
new entry. When it is a new entry, the newness determination section 
133 sets the configuration information (information about node and port) 
of the entry and the addition flag in the rest of the node synchronization 

25 table (134! or 134 2 ). 



The newness determination section 133 compares the entry, 
which is received from another node and set in the configuration 
information synchronization table 132 by the synchronization 
determination section (135! or 135 2 ), with the node synchronization 
5 tables (134! and 134 2 ) so as to determine whether the configuration 

information is new. When it is new, the newness determination section 
133 sets the configuration information (information about node and port) 
of the entry and the addition/deletion flag in the node synchronization 
tables (134! and 134 2 ). 

10 The node synchronization table 134 1f the synchronization 

determination section 135 1f a transmitting section 136 1f and a receiving 
section 137! are provided correspondingly to the node N2 (a node 
synchronization table 234 1( a synchronization determination section 
235i, a transmitting section 236!, and a receiving section 237!). 

15 Further, they have a function for establishing synchronization of the 

configuration information between the nodes N1 and N2. As shown in 
Fig. 7, for example, the configuration information and the 
addition/deletion flag, which should be synchronized with the node N2 
(virtual path configuration apparatus 200), and the synchronization flag 

20 are set in the node synchronization table 134i. 

The information and the like transmitted from the transmitting 
section 136i are received by the receiving section 237! via the control 
network 400. The information and the like transmitted from the 
transmitting section 236i are received by the receiving section 137i via 

25 the control network 400. 



The synchronization determination section 135^ determines 
whether the configuration information and the addition/deletion flag 
synchronize between the nodes N1 and N2 (virtual path configuration 
apparatus 200). Specifically, the synchronization determination 
5 section 135i transmits the configuration information and the 

addition/deletion flag set in the node synchronization table 134^ to the 
node N2 (virtual path configuration apparatus 200) via the control 
network 400. 

When the receiving section 137 ^ receives a response message 

10 which represents that the configuration information and the 

addition/deletion flag are received from the node N2 (virtual path 
configuration apparatus 200), the synchronization determination section 
135! determines that the synchronization is established between the 
nodes N1 and N2. Further, the synchronization determination section 

15 135i match the node synchronization table entry with the acked entry 
using the configuration in formation and addition/deletion flag as a key 
and sets the synchronization flag of the matching entry in the node 
synchronization table 134! (see Fig. 7) to 1. 

The node synchronization table 134 2l the synchronization 

20 determination section 135 2 , the transmitting section 136 2f and the 

receiving section 137 2 are provided correspondingly to the node N3 (a 
node synchronization table 334^ a synchronization determination 
section 335i, a transmitting section 336^ and a receiving section 337<i). 
They have a function for establishing synchronization of the 

25 configuration information between the nodes N1 and N3. As shown in 
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Fig. 7, the configuration information and the addition/deletion flag which 
should synchronize between the nodes N1 and N3 (virtual path 
configuration apparatus 300), and the synchronization flag are set in 
the node synchronization table 134 2 . 
5 The receiving section 337! receives the information and the like 

transmitted from the transmitting section 136 2 via the control network 
400. The receiving section 137 <\ receives the information and the like 
transmitted from the transmitting section 336-1 via the control network 
400. 

10 The synchronization determination section 1352 determines 

whether synchronization of the configuration information and the 
addition/deletion flag is established between the nodes N1 and N3 
(virtual path configuration apparatus 300). Specifically, the 
synchronization determination section 135 2 transmits the configuration 

15 information and the addition/deletion flag set in the node 

synchronization table 134 2 from the transmitting section 136 2 via the 
control network 400 to the node N3 (virtual path configuration apparatus 
300). 

When the receiving section 137 2 receives a response message 
20 which represents that the configuration information and the 

addition/deletion flag are received from the node N3 (virtual path 
configuration apparatus 300), the synchronization determination section 
135 2 determines that the synchronization is established between the 
nodes N1 and N3. The synchronization determination section 135 2 
25 match the node synchronization table entry with the acked entry using 
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the configuration information and addition/deletion flag as a key, and 
sets the synchronization flag of the matching entry in the node 
synchronization table 134 2 (see Fig. 7) to 1 . 

When the synchronization of the node synchronization table 
5 134 2 is established between the node N1 and a next node, the 
synchronization determination section 135 2 sites it to the newness 
determination section 133. The newness determination section 133 
checks corresponding synchronization flags of the node synchronization 
tables for all the nodes related with the entry of the configuration 

10 information synchronization table 132 whose synchronization flag is not 
set. When these flags in the node synchronization tables are all set, 
the newness determination section 133 sets the synchronization flag in 
the configuration information synchronization table 132. 

In the configuration information exchanging section 230 of the 

15 node N2, when the configuration information setting section 210 (see 
Fig. 2) sets (adds or deletes) configuration information, an entry setting 
section 231 sets the entry (the configuration information, an 
addition/deletion flag, and a synchronization flag) in the configuration 
information synchronization table 232. The configuration information 

20 synchronization table 232 has the same configuration as that of the 
configuration information synchronization table 132 (see Fig. 6). 

When the entry is a new entry or the previous entry is changed, 
however, the entry setting section 231 sets the entry in the 
configuration information synchronization table 232. 

25 A newness determination section 233 compares the node 
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synchronization tables (234 1 and 234 2 ) with the configuration 
information synchronization table 232, and determines whether the 
entry (configuration information) set by the entry setting section 231 is a 
new entry. When it is a new entry, the newness determination section 
5 233 sets the configuration information (information about node and port) 
and the addition/deletion flag of the entry in the node synchronization 
tables (234i and 234 2 ). 

The newness determination section 233 compares the entries, 
which are received at another nodes and set in the configuration 

10 information synchronization table 232 by the synchronization 

determination sections (234^ and 234 2 ), with the node synchronization 
tables (234<i and 234 2 ). The newness determination section 233 
determines whether the configuration information is new. When it is 
new, the newness determination section 233 sets the configuration 

15 information (information about node and port) of the entries and the 
addition/deletion flags in the rest of the node synchronization tables 
(234! or 234 2 ). 

The node synchronization table 234^ the synchronization 
determination section 235 1f the transmitting section 236 1f and the 

20 receiving section 237i are provided correspondingly to the node N1 (the 
node synchronization table 134 1f the synchronization determination 
section 135, the transmitting section 136 1f and the receiving section 
1370. They have a function for establishing the synchronization of the 
configuration information between the nodes N2 and N1. The 

25 configuration information, the addition/deletion flag, and the 
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synchronization flag which should synchronize with the node N1 (virtual 
path configuration apparatus 100) are set in the node synchronization 
table 234i. 

The receiving section 137 ^ receives the information and the like 
5 transmitted from the transmitting section 236^ via the control network 
400. 

The synchronization determination section 235i determines 
whether the configuration information and the addition/deletion flag 
synchronize between the nodes N2 and N1 (virtual path configuration 

10 apparatus 100). Specifically, the synchronization determination 
section 235-j transmits the configuration information and the 
addition/deletion flag set in the node synchronization table 234i from 
the transmitting section 236i via the control network 400 to the node N1 
(virtual path configuration apparatus 100). 

15 When the receiving section 237i receives a response message 

which represents that the configuration information and the 
addition/deletion flag are received from the node N1 (virtual path 
configuration apparatus 100), the synchronization determination section 
235i determines that the synchronization is established between the 

20 nodes N2 and N1. The synchronization determination section 235i 
match the node synchronization table entry with the acked entry using 
the configuration information and addition/deletion flag as a key and 
sets the synchronization flag of the matching entry in the node 
synchronization table 234^ to 1. 

25 The node synchronization table 234 2 , the synchronization 



determination section 235 2 , the transmitting section 236 2l and the 
receiving section 237 2 are provided correspondingly to the node N3 (a 
node synchronization table 334 2 , a synchronization determination 
section 335 2 , a transmitting section 336 2 , and a receiving section 337 2 ). 
5 They have a function for establishing synchronization of the 
configuration information between the nodes N2 and N3. The 
configuration information, the addition/deletion flag, and the 
synchronization flag which synchronize between the nodes N2 and N3 
(virtual path configuration apparatus 300) are set in the node 
10 synchronization table 234 2 . 

The receiving section 337 2 receives the information and the like 
transmitted from the transmitting section 236 2 via the control network 
400. 

The synchronization determination section 235 2 determines 
15 whether the configuration information and the addition/deletion flag 
synchronize between the nodes N2 and N3 (virtual path configuration 
apparatus 300). Specifically, the synchronization determination 
section 235 2 transmits the configuration information and the 
addition/deletion flag set in the node synchronization table 234 2 from 
20 the transmitting section 236 2 via the control network 400 to the node N3 
(virtual path configuration apparatus 300). 

When the receiving section 237 2 receives a response message 
which represents that the configuration information and the 
addition/deletion flag are received from the node N3 (virtual path 
25 configuration apparatus 300), the synchronization determination section 
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235 2 determines that the synchronization is established between the 
nodes N2 and N3. The synchronization determination section 235 2 
match the node synchronization table entry with the acked entry using 
the configuration information and addition/deletion flag as a key, and 
5 sets the synchronization flag of the matching entry in the node 
synchronization table 234 2 to 1. 

Further, when synchronization of the node synchronization table 
234 2 with a next node is established, the synchronization determination 
section 235 2 sites it to the newness determination section 233. The 

10 newness determination section 233 checks corresponding 

synchronization flags in the node synchronization tables of all the 
nodes related with an entry in the configuration information 
synchronization table 232 whose synchronization flag is not set. When 
these flags in the node synchronization tables are all set, the newness 

15 determination section 233 sets the synchronization flag in the 
configuration information synchronization table 232. 

In the configuration information exchanging section 330 in the 
node N3, when the configuration information setting section 310 (see 
Fig. 2) sets (adds or deletes) configuration information, an entry setting 

20 section 331 sets the entry (the configuration information, the 

addition/deletion flag, and the synchronization flag) in the configuration 
information synchronization table 332. The configuration information 
synchronization table 332 has the same configuration as that of the 
configuration information synchronization table 132 (see Fig. 6). 

25 When the entry is a new entry or a previous entry is changed, 
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the entry setting section 331 sets the entry in the configuration 
information synchronization table 332. 

A newness determination section 333 compares the node 
synchronization tables (334<i and 334 2 ) with the configuration 
5 information synchronization table 332, and determines whether the 

entry (configuration information) set by the entry setting section 331 is a 
new entry. When it is a new entry, the newness determination section 
333 sets the configuration information (information about node and port) 
and the addition/deletion flag of the entry in the node synchronization 

10 tables (334i and 334 2 ). 

The newness determination section 333 compares the entries, 
which are received from another node and set in the configuration 
information synchronization table 332 by the synchronization 
determination sections (335i and 335 2 ), with the node synchronization 

15 tables (334i and 334 2 ). The newness determination section 333 

determines whether the configuration information is new. When it is 
new, the newness determination section 333 sets the configuration 
information (information about node and port) and the addition/deletion 
flags of the entry in the rest of the node synchronization tables (334-I or 

20 334 2 ). 

The node synchronization table 334 1f the synchronization 
determination section 335^ the transmitting section 336 1f and the 
receiving section 337! are provided correspondingly to the node N1 (the 
node synchronization table 134 1f the synchronization determination 
25 section 135, the transmitting section 136 2l and the receiving section 
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137 2 ). They have a function for establishing the synchronization of the 
configuration information between the nodes N3 and N1. The 
configuration information and the addition/deletion flag which should 
synchronize with the node N1 (virtual path configuration apparatus 100) 
5 are set in the node synchronization table 334^ 

The receiving section 337! receives the information and the like 
transmitted from the transmitting section 336i via the control network 
400. 

The synchronization determination section 335i determines 

10 whether the configuration information and the addition/deletion flag 
synchronize between the nodes N3 and N1 (virtual path configuration 
apparatus 100). Specifically, the synchronization determination 
section 335i transmits the configuration information and the 
addition/deletion flag set in the node synchronization table 334i from 

15 the transmitting section 336! via the control network 400 to the node N1 
(virtual path configuration apparatus 100). 

When the receiving section 337! receives a response message 
which represents that the configuration information and the 
addition/deletion flag are received from the node N1 (virtual path 

20 configuration apparatus 100), the synchronization determination section 
335i determines that the synchronization is established between the 
nodes N3 and N1. The synchronization determination section 335i 
match the node synchronization table entry with the acked entry using 
the configuration information and addition/deletion flag as a key, and 

25 sets the synchronization flag of the matching entry in the node 



synchronization table 334i. 

The node synchronization table 334 2 , the synchronization 
determination section 335 2 , the transmitting section 336 2l and the 
receiving section 337 2 are provided correspondingly to the node N2 (the 
5 node synchronization table 234 2 , the synchronization determination 
section 235 2 , the transmitting section 236 2 , and the receiving section 
237 2 ). They have a function for establishing the configuration 
information between the nodes N3 and N2. The configuration 
information, the addition/deletion flag, and the synchronization flag 
10 which synchronize between the nodes N3 and N2 (virtual path 

configuration apparatus 200) are set in the node synchronization table 
334 2 . 

The receiving section 237 2 receives the information and the like 
transmitted from the transmitting section 336 2 via the control network 
15 400. 

The synchronization determination section 335 2 determines 
whether the configuration information and the addition/deletion flag 
synchronize between the nodes N3 and N2 (virtual path configuration 
apparatus 200). Specifically, the synchronization determination 

20 section 335 2 transmits the configuration information and the 

addition/deletion flag set in the node synchronization table 334 2 from 
the transmitting section 336 2 via the control network 400 to the node N2 
(virtual path configuration apparatus 200). 

When the receiving section 337 2 receives a response message 

25 which represents that the configuration information and the 
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addition/deletion flag are received from the node N2 (virtual path 
configuration apparatus 200), the synchronization determination section 
335 2 determines that the synchronization is established between the 
nodes N3 and N2. The synchronization determination section 335 2 
5 match the node synchronization table entry with the acked entry using 
the configuration information and addition/deletion flag as a key, and 
sets the synchronization flag of the matching entry in the node 
synchronization table 334 2 . 

Further, when synchronization of the node synchronization table 

10 334 2 with a next node is established, the synchronization determination 
section 335 2 sites it to the newness determination section 333. The 
newness determination section 333 checks corresponding 
synchronization flags in the node synchronization tables of all the 
nodes related with an entry in the configuration information 

15 synchronization table 332 whose synchronization flag is not set. When 
these flags in the node synchronization tables are all set, the newness 
determination section 333 sets the synchronization flag in the 
configuration information synchronization table 332. 

The configuration of the virtual path determination sections 140, 

20 240, and 340 shown in Fig. 2 is detailed below with reference to Fig. 4. 
In the virtual path determination section 140 in the node N1, a virtual 
path calculating section 141 calculates a plurality of virtual paths based 
on a preset calculation policy (in this case, full mesh is realized 
between ports) so that full mesh is realized between the plural ports 

25 defined in the configuration information table 120. The virtual path 



calculatingsection 141 sets the calculated result in a virtual path 
management table 142. Virtual paths which star-connect the ports 
may be calculated in another calculation policy. 

As shown in Fig. 8, the virtual path management table 142 
5 includes a reception virtual path management table 142R which 
manages reception virtual paths, and a transmission virtual path 
management table 142S which manages transmission virtual paths. 
The virtual path management table 142 shown in Fig. 8 is set based on 
the full mesh of the ports P1 to P4, for example, defined in the 

10 configuration information table 120 shown in (g) in Fig. 5. 

In the reception virtual path management table 142R, the 
reception virtual paths are virtual paths in a receiving direction viewed 
from the ports P1 and P2 in the node N1. The starting point node and 
the starting point port are a node and a port as starting points 

15 (transmission side) of the reception virtual path. The end point node 
and the end point port are a node and a port as the end points 
(reception side) of the reception virtual path. 

For example, as the reception virtual paths, the virtual paths #11, 
#21, #31, and #41 in which the port P1 in the node N1 shown in Fig. 1 

20 is the end point (reception side), and the virtual paths #12, #22, #32, 
and #42 in which the port P2 in the node N1 is the end point (reception 
side) are set. 

Meanwhile, the transmission virtual path management table 
142S, the transmission virtual paths are virtual paths in a transmission 
25 direction viewed from the ports P1 and P2 in the node N1. The 



starting point node and the starting point port are a node and a port as 
the starting points (transmission side) of the transmission virtual path. 
The end point node and the end point port are a node and a port as the 
end points (reception side) of the transmission virtual path. 
5 For example, as the transmission virtual paths, the virtual paths 

#11, #12, #13, and #14 in which the port P1 in the node N1 shown in Fig. 
1 is a starting point (transmission side), and the virtual paths #21, #22, 
#23, and #24 in which the port P2 in the node N2 is a starting point 
(transmission side) are set. 

10 The virtual path configuration section 150 has the following 

function. The virtual path configuration section 150 refers to the virtual 
path management table 142. It exchanges path information (a path 
identifier, a starting point node, a starting point port, an end point node, 
and an end point port) about the virtual paths (reception virtual paths 

15 and transmission virtual paths) determined by the virtual path 

determination section 140 between the node N1 and another nodes by 
an information transmitting section 151 and a receiving section 152. 

The first node sends out the path identifier for reception virtual 
paths, and sets the reception path identifier in the reception virtual path 

20 management table and also notified to other nodes as transmission 
virtual path identifier. Other nodes send out a path identifier of a 
transmission virtual path to the first node, and the first node set the 
received transmission virtual path identifier in the transmission virtual 
path management table of the first node. 

25 With reference to Fig. 4, a bi-directional virtual path confirming 
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section 143 has a function for referring to the virtual path management 
table 142 so as to confirm whether virtual paths (reception virtual path 
and transmission virtual path) can be set in both directions between the 
port P1 of the node N1 and a port of another node. When the virtual 
5 paths can be set in both the directions, the bi-directional virtual path 
confirming section 143 sets a usable flag in the virtual path 
management table 142. 

Further, the virtual path determination section 240 of the node 
N2 has the same configuration as that of the virtual path determination 

10 section 140. That is to say, in the virtual path determination section 
240, the virtual path calculating section 241 calculates a plurality of 
virtual paths based on the preset calculation policy (in this case, full 
mesh is realized between ports) so that full mesh is realized between 
the ports defined in the configuration information table 220. The virtual 

15 path calculating section 241 sets the calculated result in a virtual path 
management table 242. 

As shown in Fig. 9, the virtual path management table 242 
includes a reception virtual path management table 242R which 
manages reception virtual paths, and a transmission virtual path 

20 management table 242S which manages transmission virtual paths. 

The virtual path management table 242 shown in Fig. 9 is set based on 
full mesh of the ports P1 to P4, for example, defined in the configuration 
information table 220 shown in (h) in Fig. 5. 

In the reception virtual path management table 242R, the 

25 reception virtual paths are virtual paths in the reception direction 
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viewed from the port P3 of the node N2. The starting point node and 
the starting point port are a node and a port as the starting points 
(transmission side) of the reception virtual path. The end point node 
and the end point port are a node and a port as the end points 
5 (reception side) of the reception virtual path. 

For example, as the reception virtual paths, the virtual paths #13, 
#23, #33, and #43 in which the port P3 of the node N2 shown in Fig. 1 
is the end point (reception side) are set. 

Meanwhile, in the transmission virtual path management table 

10 242S, the transmission virtual paths are virtual paths in the 

transmission direction viewed from the port P3 of the node N2. The 
starting point node and the starting point port are a node and a port as 
the starting points (transmission side) of the transmission virtual path. 
The end point node and the end point port are a node and a port as the 

15 end points (reception side) of the transmission virtual path. 

For example, as the transmission virtual paths, the virtual paths 
#31 , #32, #33, and #34 in which the port P3 of the node N2 shown in 
Fig. 1 is the starting point (transmission side) are set. 

The virtual path configuration section 250 has a function for 

20 referring to the virtual path management table 242, and exchanging 

path information (a path identifier, a starting point node, a starting point 
port, an end point node, and an end point port) about the virtual paths 
(reception virtual path and transmission virtual path) determined by the 
virtual path determination section 240 between the node N2 and 

25 another node by means of the information transmitting section 251 and 
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the receiving section 252 so as to configure the virtual path for VPN. 

The first node sends out the path identifier for the reception 
virtual paths, and sets the reception path identifier in the reception 
virtual path management table and also notified to other nodes as 
5 transmission virtual path identifier. Other nodes send out the path 
identifier of the transmission virtual path, and the first node set the 
received transmission virtual path identifier in the transmission virtual 
path management table in the first node. 

With reference to Fig. 4, a bi-directional virtual path confirming 

10 section 243 has a function for referring to the virtual path management 
table 242 so as to confirm whether the virtual paths (reception virtual 
path and transmission virtual path) can be set in both the direction 
between the port P3 of the node N2 and a port in another node. When 
the virtual paths can be set in both the directions, the bi-directional 

15 virtual path confirming section 243 sets a usable flag in the virtual path 
management table 242. 

The virtual path determination section 340 in the node N3 has 
the same configuration as that of the virtual path determination section 
140. That is to say, in the virtual path determination section 340, the 

20 virtual path calculating section 341 calculates a plurality of virtual paths 
based on a preset calculation policy (in this case, full mesh is realized 
between the ports) so that full mesh is realized between the ports 
defined in the configuration information table 320. The virtual path 
calculating section 341 sets the calculated result in a virtual path 

25 management table 342. 



As shown in Fig. 10, the virtual path management table 342 
includes a reception virtual path management table 342R which 
manages the reception virtual paths, and a transmission virtual path 
management table 342S which manages the transmission virtual paths. 
5 The virtual path management table 342 shown in Fig. 10 is set based 
on full mesh of the ports P1 to P4, for example, defined in the 
configuration information table 320 shown in (i) in Fig. 5. 

In the reception virtual path management table 342R, the 
reception virtual paths are virtual paths in the reception direction 

10 viewed from the port P4 of the node N3. The staring point node and 
the starting point port are a node and a port as the starting points 
(transmission side) of the reception virtual path. The end point node 
and the end point port are a node and a port as the end points 
(reception sides) of the reception virtual path. 

15 For example, as the transmission virtual paths, the virtual paths 

#14, #24, #34, and #44 in which the port P4 of the node N3 shown in 
Fig. 1 is the starting point (transmission side) are set. 

Meanwhile, in the transmission virtual path management table 
342S, the transmission virtual paths are virtual paths in the 

20 transmission direction viewed from the port P4 of the node N3. The 
staring point node and the starting point port are a node and a port as 
the starting points (transmission side) of the transmission virtual path. 
The end point node and the end point port are a node and a port as the 
end points (reception sides) of the transmission virtual path. 

25 For example, as the transmission virtual paths, the virtual paths 
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#41, #42, #43, and #44 in which the port P4 of the node N3 shown in 
Fig. 1 is the starting point (transmission side) are set. 

The virtual path configuration section 350 has a function for 
referring to the virtual path management table 342, and exchanging 
5 path information (a path identifier, a starting point node, a starting point 
port, an end point node, and an end point port) about the virtual paths 
(reception virtual path and transmission virtual path) determined by the 
virtual path determination section 340 between the node 3 and another 
node by means of a information transmitting section 351 and a 

10 receiving section 352 so as to configure the virtual path for VPN. 

The first node sends out the path identifier for the reception 
virtual paths, and sets the reception path identifier in the reception 
virtual path management table and also notified to other nodes as 
transmission virtual path identifier. Other nodes send out the path 

15 identifier of the transmission virtual path to the first node and the first 
node set the received transmission virtual path identifier in the 
transmission virtual path management table in the first node. 

With reference to Fig. 4, a bi-directional virtual path confirming 
section 343 has a function for referring to the virtual path management 

20 table 342 so as to confirm whether virtual paths (reception virtual path 
and transmission virtual path) can be set in both directions between the 
port P4 of the node N3 and a port of another node. When the virtual 
paths can be set in both the directions, the bi-directional virtual path 
confirming section 343 sets a usable flag in the virtual path 

25 management table 342. 



An operation of the embodiment is explained below with 
reference to flowcharts shown in Figs. 11 to 16. Fig. 11 is the 
flowchart explaining the operation of the virtual path configuration 
apparatuses 100, 200, and 300 shown in Figs. 1 to 4. The following 
5 explains the case where after the configuration information 

corresponding to the ports P1, P2, and P3 shown in Fig. 2 is initially set, 
the configuration information corresponding to the port P4 is added. 

At step SA1 shown in Fig. 11, the configuration information 
exchanging section 130 of the virtual path configuration apparatus 100 

10 shown in Fig. 2 determines whether a setting command (adding 

command or deleting command) and the configuration information are 
input into the configuration information setting section 110. In this 
case, the determined result is supposed to be "No". 

At step SA2, the configuration information exchanging section 

15 130 determines whether the configuration information, which is not 

finished to be exchanged with the virtual path configuration apparatuses 
in another nodes (in this case, the node N2 or N3), is present. In this 
case, the determined result is supposed to be "No". 

At step SA3, the configuration information exchanging section 

20 130 determines whether the configuration information and the 

addition/deletion flag are received from another node. In this case* the 
determined result is supposed to be "No". Thereafter, the 
configuration information exchanging section 130 repeats the 
determination at steps SA1 to SA3 until the determined result of steps 

25 SA1 to SA3 becomes "Yes". 



The configuration information exchanging section 230 of the 
virtual path configuration apparatus 200, and the configuration 
information exchanging section 330 of the virtual path configuration 
apparatus 300 make the determination at steps SA1 to SA3. 
5 The network administrator inputs the following configuration 

information corresponding to the ports P1, P2, and P3 as the 
configuration information for defining the configuration of VPN 
inter-connecting the LAN segments S1, S2, and S3 shown in Fig. 2, and 
the adding command as the setting command, for example, using the 
10 configuration information setting section 110. 
(Configuration Information) 

■ Node N1 (10.1.1.1), port P1, adding command 
• Node N1 (10.1.1.1), port P2, adding command 

■ Node N2 (10.2.1.1), port P3, adding command 

15 As a result, the configuration information exchanging section 

130 determines as "Yes" at step SA1. At step SA4, the configuration 
information and the addition/deletion flag are transmitted from a first 
node (in this case, the node N1) to another node (in this case, the node 
N2) included in the configuration information. A first configuration 

20 information exchanging process for exchanging the configuration 
information between a first node and another node is executed. 

Specifically, at step SB1 shown in Fig. 12, the configuration 
information exchanging section 130 shown in Fig. 3 determines whether 
the configuration information input by the configuration information 

25 setting section 110 includes the node itself (in this case, the node N1). 
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In this case, the determined result is supposed to be "Yes". 

At step SB2, the entry setting section 131 of the configuration 
information exchanging section 130 refers to the configuration 
information synchronization table 132, and determines whether the 
5 configuration information is a new entry or a previous entry is changed. 

In this case, neither the configuration information nor the 
addition/deletion flag are set in the configuration information 
synchronization table 132. The entry setting section 131 makes the 

> 

determination as "Yes" at step SB2. When the determined result at 
10 step SB2 is "No", the exchanging of the configuration information is not 
necessary. 

At step SB3, the entry setting section 131, as shown in Fig. 6, 
sets the configuration information (node and port), the addition/deletion 
flag, and the synchronization flag in the configuration information 
15 synchronization table 132. In this case, since the setting command is 
the adding command, the addition/deletion flag indicates 1 (addition 
flag). Further, the synchronization flag indicates 0 (not synchronized) 
because synchronization is not established. 

At step SB4, the newness determination section 133 selects 
20 another node (in this case, the node N2) as an exchanging destination 
of the configuration information from all the nodes included in the 
configuration information table 120 shown in (a) in Fig. 5. 

The newness determination section 133 sets the configuration 
information and the addition/deletion flag obtained from the 
25 configuration information synchronization table 132 into the node 
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synchronization table corresponding to another node. In this case, the 
newness determination section 133, as shown in Fig. 6, sets the 
configuration information and the addition/deletion flag in the node 
synchronization table 134<i corresponding to the node N2 as another 
5 node. 

Since the node N3 is not included in the configuration 
information synchronization table 132 (see Fig. 6), no configuration 
information is set in the node synchronization table 134 2 (see Fig. 6) 
corresponding to the node N3. 

10 At step SB5, the newness determination section 133 requests a 

synchronization determination section (in this case, the synchronization 
determination section 135i) corresponding to another node (in this case, 
the node N2) selected at step SB6 to execute a synchronizing process. 
At step SB6, the synchronization determination section (in this 

15 case, the synchronization determination section 1350 transmits the 
synchronization information and the addition/deletion flag set in the 
node synchronization table 13^ (see Fig. 6) from the transmitting 
section 136! via the control network 400 to the exchanging destination 
(node N2). 

20 At step SB7, the synchronization determination section (in this 

case, the synchronization determination section 1350 determines 
whether a response message is received from the exchanging 
destination (node N2). In this case, the determined result is supposed 
to be "No", and the transmission of the message including the 

25 synchronization information and the addition/deletion flag is repeated. 
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The synchronization determination section 135i of the node N1 
monitors the virtual path configuration apparatus 200 of the node N2. 
The synchronization determination section 135i has a function such 
that when the response message is not received even if predetermined 
5 time passes, the network administrator is informed that any failure 
occurs in the virtual path configuration apparatus 200. 

When the receiving section 237 A of the configuration information 
exchanging section 230 in the node N2 receives the synchronization 
information and the addition/deletion flag, the configuration information 
10 exchanging section 230 makes a determination as "Yes" at step SA3 
shown in Fig. 11 . 

At step SA5, the response message is transmitted to the node 
N1 based on the configuration information and the addition/deletion flag 
received from the node N1. A second configuration information 
15 exchanging process for reflecting (adding or deleting) the configuration 
information on the configuration information table 220 is executed. 

Specifically, at step SC1 shown in Fig. 13, the synchronization 
determination section 235! of the configuration information exchanging 
section 230 shown in Fig. 3 writes the configuration information and the 
20 addition/deletion flag (see Fig. 6) received by the receiving section 237<[ 
into the node synchronization table. Further, the synchronization 
determination section 235i sets the synchronization flag and notifies it 
to the newness determination section 233. 

At step SC2, the newness determination section 233 of the 
25 configuration information exchanging section 230 compare the node 
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synchronization table 234, with configuration synchronization table 232, 
and determines whether the configuration information is a new entry. 
In this case, neither the configuration information nor the 
addition/deletion flag are set in the configuration synchronization table 
5 232, and the newness determination section 233 makes a determination 
as "Yes" at step SC2. When the determined result at step SC2 is "No", 
the exchanging of the configuration information is not necessary. 

At step SC3, the newness determination section 233 sets the 
configuration information (node and port), the addition/deletion flag, and 

10 the synchronization flag in the configuration information synchronization 
table 232 similarly to step SB3 (see Fig. 12). 

At step SC4, the synchronization determination section 235! 
transmits the response message from the transmitting section 236i to a 
transmission source node (node N1). 

15 When the response message is received by the node N1, the 

synchronization determination section 135i determines as "Yes" at step 
SB7 shown in Fig. 12. At step SB8, the synchronization determination 
section *\35i sets the synchronization flag in the node synchronization 
table 134i (see Fig. 6) for the entry, whose response message is 

20 received, to 1 according to the response message. 

At step SB9, the synchronization determination section ^35^ 
determines whether the synchronization of the node synchronization 
table is completed in all the nodes to be synchronized (in this case, only 
the node N2). In this case, the determined result is supposed to be 

25 "Yes". When the determined result at step SB9 is "No", the 



determination at SB7 is made. 

At step SB10, the entry setting section 131 determines whether 
the addition/deletion flag set in the configuration information 
synchronization table 132 at step SB3 is the addition/flag (= 1). In this 
5 case, the determined result is supposed to be "Yes". When the 

determined result at step SB10 is "No", namely, the addition/deletion 
flag is the deletion flag (= 0), the entry setting section 131 deletes the 
configuration information corresponding to the deletion flag from the 
configuration information table 120 at step SB13. 

10 At step SB11, the newness determination section 133 adds (see 

(a) Fig. 5) the configuration information corresponding to the addition 
flag to the configuration information table 120. At step SB12, the 
newness determination section 133 determines whether an entry such 
that the synchronization flag indicates 0 in the configuration information 

15 synchronization table 132 is present. When the determined result is 
"Yes (present)", the determination at step SB7 is made. 

Meanwhile, the determined result at step SB12 is "No (absent)", 
the sequence returns to a main routine shown in Fig. 11. Thereafter, 
the sequence goes through the steps SA6 to SA8, mentioned later, 

20 based on the configuration information table 120 (see (a) in Fig. 5) and 
the configuration information table 220 (see (b) in Fig. 5), so that the 
virtual paths are configured. 

With reference to Fig. 13, the newness determination section 
233 determines whether a node (transmission destination node) other 

25 than the transmission source node (in this case, the node N1) and the 



node itself (in this case, the node N2) is present in the configuration 
information synchronization table 232 (see Fig. 6) at step SC5. In this 
case, the determined result is supposed to be "No". 

The synchronization determination section 235i sets the 
5 synchronization flag for the node N1 entry in the configuration 

information synchronization table 232 to 1. The synchronization flag 
corresponding to the node itself (node N2) is also set to 1. 

When the determined result at step SC5 is "Yes", the newness 
determination section 233 sets configuration information and 
10 addition/deletion flag obtained from the configuration information 
synchronization table 232 in the node synchronization table (for 
example, node synchronization table 234 2 ) corresponding to the 
transmission destination node (for example, the node N3) at step SC6. 
At step SC7, the newness determination section 233 requests 
15 the synchronization determination section (in this case, the 

synchronization determination section 235 2 ) corresponding to the 
transmission destination node (for example, the node N3) to execute 
the synchronizing process. 

At step SC8, the synchronization determination section (in this 
20 case, the synchronization determination section 2352) transmits the 
synchronization information and the addition/deletion flag set in the 
node synchronization table 234 2 from the transmitting section 236 2 via 
the control network 400 to an exchanging destination (node N3). 

At step SC9, the synchronization determination section (in this 
25 case, the synchronization determination section 235 2 ) determines 
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whether a response message is received from the exchanging 
destination (node N3). In this case, the determined result is supposed 
to be "No", and the determination is repeated. 

When the determined result at step SC9 becomes "Yes", at step 
5 SC10, the synchronization determination section 235 2 sets the 

synchronization flag in the node synchronization table 234 2 to 1 for the 
entry whose response message is received. At step SC11, the 
synchronization determination section 235 2 determines whether the 
synchronization flag indicates 1 in all the nodes to be synchronized, 

10 and in this case, the determined result is supposed to be "Yes". 

When the determined result at step SC11 is "No", the 
determination at step SC9 is made. At step SC12, the newness 
determination section 233 determines whether the addition/deletion flag 
set in the configuration information synchronization table 232 at step 

15 SC3 is the addition flag (= 1). In this case, the determined result is 
supposed to be "Yes". 

On the other hand, when the determined result at step SC12 is 
"No", namely, the addition/deletion flag is the deletion flag (= 0), at step 
SC15, the newness determination section 233 deletes the configuration 

20 information corresponding to the deletion flag from the configuration 
information table 220. At step SC13, the newness determination 
section 233 adds the configuration information corresponding to the 
addition flag into the configuration information table 220 (see (b) in Fig. 
5). 

25 At step SC14, the newness determination section 233 
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determines whether the entry in which the synchronization flag in the 
configuration information synchronization table indicates 0 is present. 
When the determined result is "Yes (present)", the determination at step 
SC9 is made. Meanwhile, when the determined result at step SC14 is 
5 "No (absent)", the sequence returns to the main routine shown in Fig. 
11. The sequence goes through the steps SA6 to SA8, mentioned later, 
based on the configuration information table 120 (see (a) in Fig. 5) and 
the configuration information table 220 (see (b) in Fig. 5), so that the 
virtual paths are configured. 

10 The case where the port P4 of the node N3 is added to VPN 

including the port P1 of the node N1, the port P2 of the node N1, and 
the port P3 of the node N2 is explained below. Before the addition, the 
configuration information is set in the configuration information tables 
120 and 220 (see (a) and (b) in Fig. 5). Meanwhile, no configuration 

15 information is set in the configuration information table 320. 

In the case of addition, the network administrator inputs, for 
example, configuration information 121 (see (d) in Fig. 5) corresponding 
to the port P4 of the node N3, and the adding command as the setting 
command using the configuration information setting section 110 so that 

20 the LAN segment S4 is added to VPN which interconnects the LAN 
segments S1, S2, and S3 shown in Fig. 2. 

As a result, the configuration information exchanging section 
130 determines as "Yes" at step SAT. At step SA4, the first 
configuration information exchanging process is executed. Specifically, 

25 at step SB1 shown in Fig. 12, the configuration information exchanging 



section 130 shown in Fig. 3 determines whether the configuration 
information 121 input by the configuration information setting section 
110 includes the node itself (in this case, the node N1). In this case, 
the determined result is supposed to be "No". 
5 At step SB14, the configuration information exchanging section 

130 requests another node (in this case, the node N3) included in the 
configuration information 121 to exchange the configuration information. 
In this case, the configuration information exchanging section 130 
transmits configuration information (the configuration information set in 

10 the configuration information table 120 (see (a) in Fig. 5)) which has 
not been transmitted to the node N3, and the configuration information 
121 (see (d) in Fig. 5) as the configuration information 321 (see (f) in 
Fig. 5) to the node N3. Further, the configuration information 
exchanging section 130 requests the exchanging of the configuration 

15 information. 

As a result, the configuration information exchanging section 
330 (configuration information exchanging section 230) of the node N3 
determines as "Yes" at step SA2. As a result of exchanging the 
configuration information by the node N3, the nodes N1 and N2 execute 

20 the second configuration information exchanging process at step SA5. 
As a result, as shown in (g) in Fig. 5, the configuration 
information 121 (node N3 and port P4) is added into the configuration 
information table 120 of the node N1. Moreover, as shown in (h) in Fig. 
5, the configuration information 221 (see (e) in Fig. 5) is added into the 

25 configuration information table 220. 



Further, as show in (i) in Fig. 5, the configuration information 
321 (see (f) in Fig. 5) is set in the configuration information table 320. 
The same configuration information is set in the configuration 
information tables 120, 220, and 320. 
5 The process at steps SA6 to SA8 shown in Fig. 11 is detailed 

below based on the configuration information tables 120, 220, and 320. 

At step SA6, the virtual path calculating sections 141, 241, and 
341 execute the virtual path calculating processes, respectively. The 
process of the virtual path calculating section 141 is explained below. 

10 Specifically, at step SD1 shown in Fig. 14, to create the 

transmission virtual path management table 142S (see Fig. 8), the 
virtual path calculating section 141 records all the ports (nodes) of the 
configuration information table 120 (see (g) in Fig. 5) into an end point 
list (not shown). In this case, the end point list is as follows. 

15 (End point list) 

■ N1 (10.1.1.1), P1 

• N1 (10.1.1.1), P2 

■ N2 (10.2.1.1), P3 

• N3 (10.3.1.1), P4 

20 At step SD2, the virtual path calculating section 141 records the 

ports (nodes) in the node itself (in this case, the node N1) into a 
starting point list (not shown). In this case, the starting point list is as 
follows. 

(Starting point list) 
25 • N1 (10.1.1.1), P1 



• N1 (10.1.1.1), P2 

At step SD3, the virtual path calculating section 141 reads a pair 
of the end point port and the end point node from the end point list. At 
step SD4, the virtual path calculating section 141 reads a pair of the 
5 starting point port and the starting point node from the starting point list. 
At step SD5, the virtual path calculating section 141 records 
information about the starting point node, the starting point port, the 
end point node, and the end point port into the transmission virtual path 
management table 142S shown in Fig. 8. 

10 At step SD6, the virtual path calculating section 141 proceeds a 

pointer of the starting point list to the next. At step SD7, the virtual 
path calculating section 141 determines whether the pointer of the 
starting point list is the last. In this case, the determined result is 
supposed to be "No". Thereafter, steps SD4 to SD7 are repeated. 

15 When the determined result at step SD7 becomes "Yes", the 

virtual path calculating section 141 proceeds the pointer of the end 
point list to the next at step SD8. At step SD9, the virtual path 
calculating section 141 determines whether the pointer of the end point 
list is the last. In this case, the determined result is supposed to be 

20 "No". Thereafter, the steps SD3 to SD9 are repeated. 

When the determined result at step SD9 becomes "Yes", the 
creation of the transmission virtual path management table 142S shown 
in Fig. 8 is completed. 

The reception virtual path management table 142R is created 

25 based on a virtual path calculating process shown in Fig. 15. In this 
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case, however, at step SE1, to create the reception virtual path 

management table 142R (see Fig. 8), all the ports (nodes) of the 

configuration information table 120 (see (g) in Fig. 5) are recorded into 

the starting point list. 
5 Further, at step SE2, the ports (nodes) in the node itself (in this 

case, the node N1) are recorded into the end point list. 

At step SE5, a number (for example, #11) is given to the virtual 

path from the starting end port read at step SE4 to the end point port 

read at step SE3 as the reception virtual path. 
10 At step SE6, information about the starting point node, the 

starting point port, the end point node, the end point port, and the 

reception virtual path is recorded into the reception virtual path 

management table 142R shown in Fig. 8. 

The virtual path determination section 240 shown in Fig. 4 
15 creates the virtual path management table 242 shown in Fig. 9 (the 

reception virtual path management table 242R and the transmission 

virtual path management table 242S). 

Further, the virtual path determination section 340 shown in Fig. 

4 creates the virtual path management table 342 shown in Fig. 10 (the 
20 reception virtual path management table 342R and the transmission 

virtual path management table 342S). 

At step SA7 shown in Fig. 11, the virtual path configuration 

section 150 exchanges a message with another node by means of the 

transmitting section 151 and the receiving section 152, and 
25 simultaneously refers to the virtual path management table 142 (see Fig. 



8) so as to configure the virtual paths (the reception virtual path and the 
transmission virtual path) determined by the virtual path determination 
section 140 over the relay network 410. 

Specifically, the virtual path configuration section 150 puts the 
5 reception virtual path identifier, the starting point node, the starting 
point port, the end point node, and the end point port in the reception 
virtual path management table 142R into a message, so as to transmit 
the message to a node represented by the starting point node in the 
message. 

10 Meanwhile, the virtual path configuration section 150 receives a 

message about the virtual paths in which the node itself is the starting 
point, which includes the virtual path identifier, the starting point node, 
the starting point port, the end point node, and the end point port, from 
another node. 

15 When receiving this message, the virtual path configuration 

section 150 retrieves the starting point node, the staring point port, the 
end point node, and the end point port as a key from the transmission 
virtual path management table 142S. The virtual path configuration 
section 150 sets the virtual path identifier in the message into a 

20 transmission virtual path identifier field of the matched entry. 

The virtual path configuration section 250 exchanges the 
message with another node by means of the transmitting section 251 
and the receiving section 252, and simultaneously refers to the virtual 
path management table 242 (see Fig. 9), so as to configure the virtual 

25 paths (reception virtual path and transmission virtual path) determined 
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by the virtual path determination section 240 over the relay network 410. 

Specifically, the virtual path configuration section 250 puts the 
reception virtual path identifier, the starting point node, the starting 
point port, the end point node, and the end point port in the reception 
5 virtual path management table 242R into the message, so as to transmit 
the message to a node represented by the starting point node in the 
message. 

Meanwhile, the virtual path configuration section 250 receives 
the message about the virtual path in which the node itself is the 

10 starting point, which includes the virtual path identifier, the starting point 
node, the starting point port, the end point node, and the end point port, 
from another node. 

When receiving this message/the virtual path configuration 
section 250 retrieves the starting point node, the starting point port, the 

15 end point node, and the end point port as a key from the transmission 
virtual path management table 242S, so as to set the virtual path 
identifier in the message into a transmission virtual path identifier field 
of the matched entry. 

The virtual path configuration section 350 exchanges the 

20 message with another node by means of the transmitting section 351 
and the receiving section 352, and simultaneously refers to the virtual 
path management table 342 (see Fig. 10), so as to configure the virtual 
paths (reception virtual path and transmission virtual path) determined 
by the virtual path determination section 340 in the relay network 410. 

25 Specifically, the virtual path configuration section 350 puts the 



reception virtual path identifier, the starting point node, the starting pint 
port, the end point node, and the end point port in the reception virtual 
path management table 342R into a message, so as to transmit the 
message to a node represented by the starting point node in the 
5 message. 

Meanwhile, the virtual path configuration section 350 receives 
the message about the virtual path in which the node itself is the 
starting point, which includes the virtual path identifier, the starting point 
node, the starting point port, the end point node, and the end point port, 

10 from another node. 

When receiving this message, the virtual path configuration 
section 350 retrieves the starting point node, the starting point port, the 
end point node, and the end point port as a key from the transmission 
virtual path management table 342S. The virtual path configuration 

15 section 350 sets the virtual path identifier in the message into a 
transmission virtual path identifier field of the matched entry. 

Fig. 1 illustrates the virtual paths #11 to #44 configured over the 
relay network 410. In the embodiment, the virtual path configuration 
section 150 shown in Fig. 4 creates labels (for example, #11 is a label 

20 L11) for identifying the reception virtual paths and the transmission 
virtual paths in the virtual path management table 142 (see Fig. 8). 
The labels may be distributed to other nodes. 

With reference to Fig. 11, at step SA8, the bi-directional virtual 
path confirming sections 143, 243, and 343 shown in Fig. 4 execute 

25 bi-directional virtual path confirming processes, respectively. The 



process of the bi-directional virtual path confirming section 143 is 

explained below. 

Specifically, the bi-directional virtual path confirming section 143 

refers to the virtual path management table 142 (see Fig. 8), and 
5 confirms whether virtual paths (reception virtual path and transmission 

virtual path) are set in both the directions between the ports P1 and P2 

of the node N1, and the port of another node. 

At steps SF1 to SF13 shown in Fig. 16, it is confirmed that the 

reception virtual path and the transmission virtual path are set in both 
10 the directions between any two ports of the ports included in the 

configuration information table 120. In this process, the virtual paths 

in which the ports P1 and P2 of the node N1 is the starting points or the 

end points are checked. 

That is to say, at step SF1 shown in Fig. 16, the bi-directional 
15 virtual path confirming section 143 records all the ports (nodes) of the 

configuration information table 120 (see (g) in Fig. 5) into the starting 

point list (not shown). In this case, the starting point list is as follows. 

(Starting point list) 

■ N1 (10.1.1.1), P1 
20 ■ N1 (10.1.1.1), P2 

• N2 (10.2.1.1), P3 

• N3 (10.3.1.1), P4 

At step SF2, the bi-directional virtual path confirming section 
143 records the ports (node) in the node itself (in this case, the node 
25 N1) into the end point list (not shown). In this case, the end point list 



is as follows. 
(End point list) 

■ N1 (10.1.1.1), P1 

■ N1 (10.1.1.1), P2 

5 At step SF3, the bi-directional virtual path confirming section 

143 reads one set of the end point port and the end point node from the 
end point list. At step SF4, the bi-directional virtual path confirming 
section 143 reads one set of the starting point port and the starting 
point node form the starting point list. 
10 AT step SF5, the bi-directional virtual path confirming section 

143 retrieves the starting point node and the starting point port read at 
step SF4, and the end point node and the end point port read at step 
SF3 as a key from the reception virtual path list management table 
142R (see Fig. 8). 

15 At step SF6, the bi-directional virtual path confirming section 

143 checks that the reception virtual path identifier is set and a 
distributed flag indicates 1. When the determined result at step SF6 is 
"No", the bi-directional virtual path confirming section 143 checks for a 
next pointer of the start point list at step SF10. 

20 Meanwhile, when the determined result at step SF6 is "Yes", at 

step SF7, the bi-directional virtual path confirming section 143 retrieves 
the starting point node and the starting point port read at step SF4, and 
the end point node and the end point port read at step SF3 as a key 
from the transmission virtual path list management table 142S (see Fig. 

25 8) with the end point and the starting point being exchanged with each 
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other. 

At step SF8, it is checked that the transmission virtual path 
identifier is set in the entry. When the determined result at step SF8 is 
"No", the bi-directional virtual path confirming section 143 checks for a 
5 next point of the start point list at step SF10. 

When the determined result at step SF8 becomes "Yes", the 
bi-directional virtual path confirming section 143 sets (to 1) usable flags 
of the entry in a reception virtual path list and a transmission virtual 
path list at step SF9. 
10 At step SF10, the bi-directional virtual path confirming section 

143 proceeds the pointer of the starting point list to the next. At step 
SF11, the bi-directional virtual path confirming section 143 determines 
whether the pointer of the starting point list is the last. In this case, 
the determined result is supposed to be "No". Thereafter, steps SF4 to 
15 SF11 are repeated. 

At step SF12, the bi-directional virtual path confirming section 
143 proceeds the pointer of the end point list to the next. At step SF13, 
the bi-directional virtual path confirming section 143 determines 
whether the pointer of the end point list is the last. In this case, the 
20 determined result is supposed to be "No". Thereafter, steps SF3 to 
SF13 are repeated. 

Similarly to the bi-directional virtual path confirming section 143, 
the bi-directional virtual path confirming section 243 refers to the virtual 
path management table 242 (see Fig. 9), and confirms the both 
25 directions. Similarly to the bi-directional virtual path confirming section 
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143, the bi-directional virtual path confirming section 343 refers to the 
virtual path management table 342 (see Fig. 10), and confirms both the 
directions. 

As explained with reference to Fig. 1, the embodiment explains 
5 the configuration example such that the configuration information 

including the nodes and the ports is exchanged between the nodes, and 
the virtual paths #11 to #44 are configured between the ports. As 
shown in Fig. 17, however, a configuration example may be such that 
virtual paths N#11 to N#33 may be configured between the nodes. 
10 This configuration example is explained below as a first modification of 
the embodiment. 

The virtual paths in the first modification are expressed by 
numbers of two digits (x 1 and y 1 ) after N#. The number x' represents a 
node of a starting point in the virtual path. The number y' represents a 
15 node of an end point in the virtual path. For example, the virtual path 
N#11 is a path from the node N1 as the starting point to the node N1 as 
the end point. Further, the virtual path N#21 is a path from the node 
N2 as the starting point to the node N1 as the end point. 

In the first modification, instead of the configuration information 
20 tables 120, 220, and 320 shown in Fig. 5 (see (g), (h), and (i)), 

configuration information tables 120\ 220\ and 320' shown in Figs. 18A, 
18B, and 18C are used. 

The configuration information tables 120\ 220\ and 320* store 
only information about nodes composing VPN. 
25 In the first modification, in the virtual path configuration 



apparatus 100 shown in Fig. 17, instead of the virtual path management 
table 142 shown in Fig. 18 (the reception virtual path management table 
142R and the transmission virtual path management table 142S), a 
virtual path management table 142* shown in Fig. 19 (a reception virtual 
5 path management table 142R' and a transmission virtual path 

management table 142S') is created. The virtual path management 
table 142' is created based on the configuration information table 120' 
(see Fig. 18A). 

Similarly, in the virtual path configuration apparatus 200 shown 
10 in Fig. 17, instead of the virtual path management table 242 shown in 
Fig. 9 (the reception virtual path management table 242R and the 
transmission virtual path management table 242S), a virtual path 
management table 242' shown in Fig. 20 (a reception virtual path 
management table 242R 1 and a transmission virtual path management 
15 table 242S') is created. The virtual path management table 242' is 
created based on the configuration information table 220* (see Fig. 
18B). 

Similarly, in the virtual path configuration apparatus 300 shown 
in Fig. 17, instead of the virtual path management table 342 shown in 

20 Fig. 10 (the reception virtual path management table 342R and the 
transmission virtual path management table 342S), a virtual path 
management table 342' shown in Fig. 21 (a reception virtual path 
management table 342R' and a transmission virtual path management 
table 342S') is created. The virtual path management table 342' is 

25 created based on the configuration information table 320* (see Fig. 
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18C). 

The embodiment shown in Fig. 1 explains the configuration 
example where the control network 400 and the relay network 410 are 
provided between the nodes (virtual path configuration apparatuses). 
5 Like a second modification shown in Fig. 22, however, an actual 
network 500 may be provided, a first layer 510 may be used as the 
control network, and a second layer 520 may be used as the relay 
network. 

The embodiment shown in Fig. 1 explains the configuration 

10 example where the control network 400 and the relay network 410 are 
provided between the nodes (virtual path configuration apparatuses). 
Like a third modification shown in Fig. 23, however, a control 
network/relay network 600 where the control network and the relay 
network are constituted on one network and layer may be used. 

15 The embodiment shown in Fig. 1 explains the configuration 

example where the control network 400 and the relay network 410 are 
provided between the nodes (virtual path configuration apparatuses). 
Like a fourth modification shown in Fig. 24, however, a first actual 
network 700 may be used as the control network, and a second actual 

20 network 710 may be used as the relay network. 

The embodiment shown in Fig. 1 explains the configuration 
example where the control network 400 and the relay network 410 are 
provided between the nodes (virtual path configuration apparatuses). 
Like a fifth modification shown in Fig. 25, however, an actual network 

25 800 may be provided, a first layer 810 may be used as the control 



network, and a second layer 820 may be used as a relay network (= 
ATM network). 

The embodiment shown in Fig. 1 explains the configuration 
example where the control network 400 and the relay network 410 are 
5 provided between the nodes (virtual path configuration apparatuses). 
Like a sixth modification shown in Fig. 26, however, an actual network 
900 may be provided, a first layer 910 may be used as the control 
network, and a second layer 920 may be used as the relay network 
(=Frame Relay network). 

10 . The embodiment shown in Fig. 1 explains the configuration 

example where the control network 400 and the relay network 410 are 
provided between the nodes (virtual path configuration apparatuses). 
Like a seventh modification shown in Fig. 27, however, an actual 
network 1000 may be provided, a first layer 1010 may be used as the 

15 control network, and a second layer 1020 may be used as the relay 
network (=MPLS network). 

The embodiment shown in Fig. 1 explains the configuration 
example where the control network 400 and the relay network 410 are 
provided between the nodes (virtual path configuration apparatuses). 

20 Like an eighth modification shown in Fig. 28, however, an actual 

network 1100 may be provided, a first layer 1110 may be used as the 
control network, and a second layer 1120 may be used as the relay 
network (HP network). 

The embodiment shown in Fig. 1 explains the configuration 

25 example where the control network 400 and the relay network 410 are 



provided between the nodes (virtual path configuration apparatuses). 
Like a ninth modification shown in Fig. 29, however, an actual network 
1200 may be provided, a first layer 1210 may be used as the control 
network (=ATM network), and a second layer 1220 may be used as the 
5 relay network. 

The embodiment shown in Fig. 1 explains the configuration 
example where the control network 400 and the relay network 410 are 
provided between the nodes (virtual path configuration apparatuses). 
Like tenth modification shown in Fig. 30, however, an actual network 

10 1300 may be provided, a first layer 1310 may be used as the control 
network (=Frame Relay network), and a second layer 1320 may be 
used as the relay network. 

The embodiment shown in Fig. 1 explains the configuration 
example where the control network 400 and the relay network 410 are 

15 provided between the nodes (virtual path configuration apparatuses). 
Like an eleventh modification shown in Fig. 31, however, an actual 
network 1400 may be provided, a first layer 1410 may be used as the 
control network (HP network), and a second layer 1420 may be used as 
the relay network. 

20 The embodiment shown in Fig. 1 explains the configuration 

example where the control network 400 and the relay network 410 are 
provided between the nodes (virtual path configuration apparatuses). 
Like a twelfth modification shown in Fig. 32, however, an actual network 
900 may be provided, a first layer 910 may be used as the control 

25 network (=bridge network), and a second layer 920 may be used as the 



relay network. 

According to the embodiment, the configuration information 
provided in one virtual path configuration apparatus (for example, the 
virtual path configuration apparatus 100) is shared between all the 
5 virtual path configuration apparatuses, so that the virtual paths are 
configured. Accordingly, a load on the network administrator required 
for configuring the virtual paths can be reduced, and thus convenience 
can be improved. 

According to the embodiment, as explained at SB5 (see Fig. 12), 
10 the load on the network administrator required for re-configuring the 
virtual paths due to the addition of configuration information can be 
reduced, and thus the convenience can be improved. 

According to the embodiment, as explained at SB5 (see Fig. 12), 
the load on the network administrator required for re-configuring the 
15 virtual paths due to the deletion of configuration information can be 
reduced, and thus the convenience can be improved. 

According to the embodiment, since states of another virtual 
path configuration apparatuses are monitored, the network 
administrator can quickly cope with the occurrence of failure or the like. 
20 Further, according to the embodiment, the configuration information list 
including the components of a virtual private network is exchanged 
between all the nodes configuring the virtual private network. 
Accordingly, when failure occurs in a necessary communication path 
between the components, the location of failure can be specified in any 
25 nodes. 



The embodiment of the present invention is explained with 
reference to the drawings, but the concrete configuration example is not 
limited to the embodiment, and all changes in design are intended to be 
embraced in the present invention without departing from the scope of 
5 the present invention. 

For example, in the embodiment, a program for realizing the 
functions of the virtual path configuration apparatuses 100, 200, and 
300 shown in Fig. 1 may be recorded in a recording medium 1700 
readable by a computer shown in Fig. 33, the program recorded in the 
10 recording medium 1700 may be read into the computer 1600 shown in 
the drawing and executed so as to realize the functions. 

The computer 1600 shown in the drawing includes a central 
processing unit (CPU) 1610 which executes the program, an input 
device 1620 such as a keyboard and or a mouse, a read only memory 
15 (ROM) 1630 which stores various data, a random access memory 
(RAM) 1640 which stores an operation parameter and the like, a 
reading device 1650 which reads the program from the recording 
medium 1700, and an output device 1660 such as a display or a printer. 
The CPU 1610 reads the program recorded in the recording 
20 medium 1700 via the reading device 1650, and executes the program 
so as to realize the function. The recording medium 1700 includes an 
optical disc, a flexible disc, a hard disc, and the like. 

According to the present invention, the configuration information 
set in one virtual path configuration apparatus is shared between all 
25 virtual path configuration apparatuses, so that the virtual paths are 
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configured. Accordingly, the load on the network administrator 
required for configuring the virtual paths can be reduced, and thus the 
convenience can be improved. 

Furthermore, the load on the network administrator required for 
5 reconfiguring the virtual paths due to addition of configuration 

information can be reduced, and thus the convenience can be improved. 

Moreover, the load on the network administrator required for 
reconfiguring the virtual paths due to deletion of configuration 
information can be reduced, and thus the convenience can be improved. 

10 Since states of other virtual path configuration apparatuses are 

monitored, the network administrator can quickly cope with the 
occurrence of failure or the like. Further, according to the present 
invention, the configuration information list including the components of 
the virtual private network is exchanged between all the nodes 

15 composing the virtual private network. Accordingly, when the failure 
occurs in a necessary communication path between the components, 
the location of failure in any nodes can be specified. 

Although the invention has been described with respect to a 
specific embodiment for a complete and clear disclosure, the appended 

20 claims are not to be thus limited but are to be construed as embodying 
all modifications and alternative constructions that may occur to one 
skilled in the art which fairly fall within the basic teaching herein set 
forth. 
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